Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
File:                     h2h0NgiWQiWeHHlERxdaLHZY6qw.mft (raw, json)
Hash identifier:          4W86503nBwLXuqVU2S/2sag66gZoljfecF2UBKYIx0k=
Subject key identifier:   88:A5:BA:40:33:EF:53:A5:90:EE:46:0C:AD:A8:4E:DC:93:8F:CD:5C
Authority key identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
Certificate issuer:       /CN=F3616EA4AF/serialNumber=87687436089642259E1C794447175A2C7658EAAC
Certificate serial:       020E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
Manifest number:          020B
Signing time:             Thu 15 Oct 2026 04:52:30 +0000
Manifest this update:     Thu 15 Oct 2026 04:52:29 +0000
Manifest next update:     Sat 17 Oct 2026 04:52:29 +0000
Files and hashes:         1: h2h0NgiWQiWeHHlERxdaLHZY6qw.crl (hash: psqtjM3wPmoqCvp7GZLn/rLrRyA+VN0E1V7s0/0SXME=)
                          2: 60A315E6417711F0BAB45C7CDAE4EC9C.roa (hash: 1DDIa6aslINFzcXNYReTt3YTJSjzz9Bz8PpNSRKmn4s=)
                          3: 8ABD40685DBA11F0882F677FDAE4EC9C.roa (hash: LtTHAsI+8AgzrnAlcOiN9VsFsRmyEiAm6n6J+entv6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616EA4AF, serialNumber=87687436089642259E1C794447175A2C7658EAAC
        Validity
            Not Before: Oct 15 04:52:29 2026 GMT
            Not After : Oct 17 04:52:29 2026 GMT
        Subject: CN=6ad05c0e-d28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:fe:f0:2e:86:5d:c5:3b:39:1c:cd:29:e6:
                    9d:eb:76:9c:a4:7b:51:59:66:1b:71:c2:a4:24:f8:
                    b0:3d:33:b1:79:00:81:52:58:9e:69:be:e8:51:eb:
                    c7:1c:35:e5:c1:a5:7e:80:17:50:01:49:d9:23:f0:
                    e5:4f:91:15:a3:cd:d8:2c:4b:d5:f2:89:d8:03:f8:
                    cf:2d:43:f2:6b:34:f7:12:c1:7f:98:02:95:75:fd:
                    38:46:ef:2f:64:f9:7b:ad:75:72:8d:b2:84:ba:c0:
                    2a:6a:74:0e:9c:b2:4f:5b:37:53:22:61:0a:c4:e9:
                    57:53:4b:91:5c:22:af:a1:46:f4:59:c9:b0:59:82:
                    c2:18:2e:e9:79:ae:b5:1f:e5:78:71:10:ac:19:6a:
                    d1:15:82:9f:da:cb:6f:78:84:2c:55:42:da:ff:66:
                    96:c6:a4:2e:a2:1b:43:b8:59:0c:a0:e3:d6:7d:21:
                    c5:13:76:8a:ba:06:51:da:cc:2a:80:7a:bb:bd:54:
                    34:57:28:36:0c:85:11:b2:ba:96:c2:48:93:7d:55:
                    ea:51:39:c1:f0:5a:89:60:35:86:f5:f7:08:82:bc:
                    bb:11:88:e0:da:24:b4:e6:26:f7:b1:a1:1e:ba:22:
                    63:ec:e1:da:39:58:66:39:fb:9e:5f:46:98:f6:7b:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A5:BA:40:33:EF:53:A5:90:EE:46:0C:AD:A8:4E:DC:93:8F:CD:5C
            X509v3 Authority Key Identifier:
                keyid:87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d7:df:4a:d6:af:d3:16:32:9c:fa:e0:06:d8:bd:df:fc:60:
         1f:11:99:54:35:a8:ec:b3:19:d0:25:14:03:ee:45:e4:42:f3:
         67:dc:a2:a0:8e:45:fb:7c:c8:b3:e5:58:08:43:a6:aa:1a:b1:
         bc:3d:4e:b5:42:24:fd:d3:8a:e1:a6:bd:0e:cf:eb:2a:23:04:
         b7:52:5d:9a:1a:1b:3e:56:fd:6d:5e:c5:62:ad:65:03:88:00:
         c8:86:cc:95:16:63:b8:d7:0d:91:bd:7d:67:15:03:87:e9:23:
         74:38:7b:f4:1e:75:1d:36:a2:ce:40:46:f5:c8:0f:63:0e:51:
         eb:cb:e7:9f:d1:b8:cb:a7:31:3c:51:69:f0:1f:db:21:4a:51:
         9e:1f:1f:eb:d4:49:3e:c0:63:59:fa:58:0b:86:6b:7f:35:81:
         51:8c:18:2d:21:d4:01:c2:35:4f:fb:61:2d:32:54:8a:5c:fc:
         7a:20:97:69:aa:6e:2f:cd:6f:e1:73:d7:ee:c0:59:ea:66:8a:
         b1:db:3c:35:8a:ac:7e:14:c2:a0:86:61:c9:3c:06:72:ff:9e:
         4b:17:dc:52:c1:26:84:5d:79:42:14:43:d8:1e:2f:0a:ec:ad:
         f8:d5:ec:82:a0:8f:71:a6:ac:d1:7f:3a:f2:ec:52:70:4e:98:
         2b:77:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----